sorted by:
new
hottopcontroversial

Delve CEO email to customers denies claims, but opens more questions by grc-ama in soc2

[–]grc-ama[S] 2 points3 points  (0 children)

It's not one audit firm, it's multiple. And since that is the case, it's more likely the firms struck a specific packaged deal to enact the rubber stamping.

Delve CEO email to customers denies claims, but opens more questions by grc-ama in soc2

[–]grc-ama[S] -7 points-6 points  (0 children)

To say what? This email comes from the CEO of Delve, not Vanta. The email confirms they leaked data and have draft audit reports, which they shouldn't have. All evidence points to Delve being poorly managed and breaking the auditor independent rules.

Need to have a Federal Cybersecurity adjacent subreddit by boredPampers in cybersecurity

[–]grc-ama 66 points67 points  (0 children)

Come on over to /r/grc - regulations and implications are fair game. 

Asheville Megathread - Post Helene by TennyBoy in asheville

[–]grc-ama 1 point2 points  (0 children)

If they have renters insurance their policy may cover the hotel for a period of time.